2017-01-31 09:26:57 +00:00
|
|
|
# Pin the base image to a specific hash for maximum reproducibility.
|
|
|
|
|
# It will probably still work on newer images, though, unless Debian 8
|
|
|
|
|
# changes some compiler optimisations (unlikely).
|
2017-10-15 13:35:03 +00:00
|
|
|
#FROM ocaml/opam:debian-8_ocaml-4.04.2
|
2017-11-09 15:20:55 +00:00
|
|
|
FROM ocaml/opam@sha256:17143ad95a2e944758fd9de6ee831e9af98367455cd273b17139c38dcb032f09
|
2017-01-28 13:44:21 +00:00
|
|
|
|
|
|
|
|
# Pin last known-good version for reproducible builds.
|
2017-01-31 09:26:57 +00:00
|
|
|
# Remove this line (and the base image pin above) if you want to test with the
|
|
|
|
|
# latest versions.
|
2017-11-14 12:35:33 +00:00
|
|
|
RUN cd opam-repository && git fetch origin && git reset --hard 67ab04a9a142da70935c9fdf919bf09b517499c9 && opam update
|
2017-01-28 13:44:21 +00:00
|
|
|
|
2017-01-09 16:45:16 +00:00
|
|
|
RUN sudo apt-get install -y m4 libxen-dev
|
2017-11-14 12:35:33 +00:00
|
|
|
# TODO: remove this once the new versions are released (mnx>1.7.1)
|
2017-11-09 15:20:55 +00:00
|
|
|
RUN opam pin add -yn --dev netchannel
|
|
|
|
|
RUN opam install -y vchan xen-gnt mirage-xen-ocaml mirage-xen-minios io-page mirage-xen mirage mirage-nat mirage-qubes
|
2017-01-09 16:45:16 +00:00
|
|
|
RUN mkdir /home/opam/qubes-mirage-firewall
|
|
|
|
|
ADD config.ml /home/opam/qubes-mirage-firewall/config.ml
|
|
|
|
|
WORKDIR /home/opam/qubes-mirage-firewall
|
2017-03-05 16:31:04 +00:00
|
|
|
RUN opam config exec -- mirage configure -t xen && make depend
|
|
|
|
|
CMD opam config exec -- mirage configure -t xen && \
|
2017-01-09 16:45:16 +00:00
|
|
|
opam config exec -- make tar
|
